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Abstract 

We examine the power of silent constant-space probabilistic verifiers that watch asymmet- 
ric debates (where one side is unable to see some of the messages of the other) between two 
deterministic provers, and try to determine who is right. We prove that probabilistic verifiers 
outperform their deterministic counterparts as asymmetric debate checkers. It is shown that 
the membership problem for every language in NSPACE(s(n)) has a 2 s (™)-time debate where one 
prover is completely blind to the other one, for polynomially bounded space constructible s(n). 
When partial information is allowed to be seen by the handicapped prover, the class of languages 
debatable in 2 S ^ time contains TIME(2 s ( n )), so a probabilistic finite automaton can solve any 
decision problem in P with small error in polynomial time with the aid of such a debate. We 
also compare our systems with those with a single prover, and with competing-prover interactive 
proof systems. 

1 Introduction 

The alternating computation model is well-known to correspond to the problem of finding winning 
strategies in two-person games of perfect information [lj. Another equivalent way [TO] of looking 
at this model is in terms of debate checking, where a deterministic Turing machine (the "verifier" 
V for L, the language under consideration) reads an exchange of arguments for and against the 
membership of the input string w in L written by two opposing "provers" (PI and P0, respectively), 
and tries to determine who is rig While "stand-alone" polynomial-time Turing machines only 
recognize the languages in the complexity class P, every language in PS PACE is "debatable" in the 
sense that PI can make V accept no matter what P0 says if and only if w E L. This advantage 
vanishes when the verifier is restricted to use a constant amount of space, where the corresponding 
class of debatable languages turns out [12] to equal those that can be recognized by stand-alone 
finite-state automata, namely, the regular languages. 

The basic model described above has been extended in several ways. Reif [13] studied two-person 
games of incomplete information, where one of the players may not see all of the positions of its 

*Abuzer Yakaryilmaz was partially supported by FP7 FET-Open project QCS. 

1 Note that V is just a silent spectator who does not communicate any information to the provers; this is a crucial 
difference between the debate checking model and the multi-prover interactive protocols with competing provers such 
as those of [8]. See Section [5] 
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opponent, and zero information]^ which correspond to an extreme case where one of the players 
cannot see what the other one is doing at all. The problems of finding winning strategies in these 
new types of games correspond to generalizations of the alternating Turing machine (ATM) model 
that are called private and blind ATMs, respectively. Adopting the three-agent "verification" view 
mentioned above, naming what the verifier checks in these new setups requires a generalization of 
the notion of "debate." In the protocols to be presented in this paper, PO can see all the messages 
of PI, whereas PI can only see the messages of PO that are designated as public by PO. The verifier 
V can of course see all messages of both provers. This may be likened to a debate where one of the 
debaters is deaf, and can "hear" his opponent only when the opponent chooses to write her message 
on a board for him to read. We call this process a (potentially) asymmetric debate. In contrast 
with the situation with complete-information debates, the class of languages that are debatable 
in this generalized sense for constant-space verifiers has been proven to properly contain those for 
stand-alone verifiers that are similarly bounded |13] . 

Another extension that has been considered for the original debate checking model is to upgrade 
the verifier to a probabilistic, rather than deterministic, TM. Condon et al. OH] have shown that, 
when the verifier is a polynomial-time PTM that is restricted to use only logarithmically many 
random coins, and read only a constant number of bits of the debate, every language in PS PACE 
is debatable, even if PO uses the simple strategy of choosing its messages randomly. 

In this paper, we examine the power of probabilistic verifiers that read potentially asymmetric 
debates between two deterministic provers. We focus on constant-space verifiers, since these already 
yield extremely powerful systems: When the debate format just requires that all and only the 
members of L should be accepted with high probability, but allows PI to talk endlessly when 
w ^ L, tricking V to run forever without rejecting, all recursively enumerable languages have "one- 
way interactive proof systems" (i.e. debates without PO). We show that, for any space constructible 
and polynomially bounded function s(n), all languages in the class TIME(2 s ( n )) have generalized 
debates that can be checked with constant-space verifiers in time 2 s ^ n \ and NSPACE(s(n)) has 2 S ^- 
time debates where PI does not see PO. So, for instance, every language in P has a constant-space 
polynomial-time debate system, whereas this is not known to be possible even in exponential time 
for one-way interactive proof systems with similarly bounded verifiers. 

The rest of this paper is structured as follows: We provide the necessary definitions in Section 
[2j Our results on the power of probabilistic verifiers of asymmetric debates are presented in Section 
El In Section [H we list some open questions. 

2 Preliminaries 

Our formal model of debate systems is a natural generalization of one-way interactive proof systems 
[21 The verifier is a probabilistic Turing machine (PTM) with a read-only input tape and a single 
read/write work tape. The input tape holds the input string between two occurrences of an end- 
marker symbol, and we assume that the machine's transition function never attempts to move the 
input head beyond the end-markers. The input tape head is on the left end-marker at the start 
of the process. The verifier reads information written by two competing provers, PI and PO, by 
alternately consulting two reading cells, CI and CO. When it is consulted for the ith. time, cell CI 
returns the ith. symbol in Pi's argument for the membership of the input string in the language 
under consideration. CO similarly yields the next symbol in PO's counterargument. The symbols 
used in this communication are chosen from two mutually exclusive alphabets named T and A. T 
is the set of symbols that can be seen by the opposing prover, and PI is only allowed to use this 

2 This is not to be confused with the unrelated notion of zero knowledge. 
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alphabet in its messages. A is the set of private symbols that PO may choose to write to the verifier 
without showing to PI (this is the crucial component in our definition that allows for asymmetric 
debates). PO can use any member of T U A in its messages. PI (resp., PO) is assumed to have 
seen the subsequence of all the public symbols (i.e. those in T) among the first i — 1 (resp., i) 
symbols emitted up to that time before preparing its ith symbol. Each prover can be modeled 
as a (not necessarily computable) prover transition function, which determines the ith symbol £ 
based on the input string and the part of the communication that it has seen so far. Using this 
communication infrastructure, PI attempts to convince the verifier that it is right, and PO tries to 
prove PI wrong. We allow the possibility that the cheating prover sends an infinite sequence of 
symbols, a contingency that could cause careless verifiers to run forever. The verifier also has access 
to a source of private random bits. The state set of the verifier TM is Q, containing, among others, 
two special halting states, q a (accept) and q r (reject). One of the non-halting states is designated 
as the start state. A subset R of Q that does not contain the halting states is designated to be 
the set of reading states. R is partitioned to two subsets, R\ and i?o, where the program of the 
machine (to be described shortly) ensures that the first reading state to be entered is in R\, and 
the sequence of reading states entered during computation alternates between members of R± and 
Rq. Whenever a state q G Ri is entered, the next symbol of Pi's message is written in reading cell 
Ci. Let = {— 1,0, +1} denote the set of possible head movement directions. The program of 
the verifier is formalized by the verifier transition function 5 as follows: For i G {0, 1} and q G Ri, 
5(q,a,6,(i,b) = (q',9', dih, d w h) means that the machine will switch to state q', write 9' on the work 
tape, move the input head in direction dih G 0, and the work tape head in direction d w h G 0, if it is 
originally in state q, scanning the symbols a, 9, Q, in the input and work tapes, and the reading cell 
Ci, respectively, and seeing the random bit 6 as a result of the coin toss. If q G Q — (R U {q a , q r }), 
a restricted version of the verifier transition function described above that does not involve the 
symbol from the reading cell is applied. The probability that V accepts an input string w (i.e. ends 
up in q a ) as the result of watching a debate between PI and PO is denoted by a™ VP1 po y r^ pi pQ ^ 
denotes the probability that V rejects w in such a scenario. 

We say that language L has a partial-information debate with error probability e if there exist 
a verifier V and a prover PI such that 

1. for every and for any prover PO*, a™ vpi pQ ^ > 1 — e, and, 

2. for any prover II, there exists a prover POn, such that for every w ^ L, r™y U p(j ^ > 1 — s. 

We will also see some systems where condition (2) above is relaxed, so that the verifier is allowed 
to fail to halt with high probability for w ^ L. 

PDEB(s,t) is the class of languages that have partial-information debates with error probability 
e for some e < |, such that the verifier of the debate has a worst-case space bound of 0(s(n)), and 
an expected time bound of 0(t(n)). Classes of languages with zero-information debates (i.e. where 
PO never emits a symbol in T) have names of the form ZDEB(s,t). 

A one-way interactive proof system is simply a debate system without PO. (One may assume 
that consulting CO always yields the same symbol in this case.) 

We focus on verifiers with constant space. The following facts are known in this regard about 
one-way interactive proof systems: 

Fact 1. All languages that have one-way interactive proof systems with constant- space verifiers are 
in NTIME(2 2 ° (n) ). 
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Fact 2. Every language in NSPACE(n) has a one-way interactive proof system with a constant- space 
verifier^ 

Fact 3. One-way interactive proof systems which are allowed to fail to halt for nonmembers of the 
debated language exist for all recursively enumerable languages. J3j/ 

Fact 4. The class of languages with one-way interactive proof systems where the verifier is restricted 
to use a constant number of random bits is precisely NL. 

(Two-prover) debate systems with deterministic verifiers have been studied extensively: 

Fact 5. When the verifier is a deterministic constant- space TM, and the debaters display complete 
information to each other, no nonregular language is debatable. 

Fact 6. When the verifier is a deterministic constant- space TM, and PO displays zero information 
to PI, the class of debatable languages is NSPACE(n). flSf 

Fact 7. When the verifier is a deterministic constant- space TM, and PO displays partial information 
to PI, the class of debatable languages is TIME(2 0(n) ). fig]/ 

Since complete-information debates with probabilistic constant-space verifiers include one-way 
interactive proof systems as a restricted case, it is clear that they outperform their counterparts 
with deterministic verifiers, by Facts [2] and [5j To our knowledge, this paper is the first examination 
of potentially asymmetric debate systems with probabilistic verifiers. 

We will find it interesting to compare our debate checking model with the competing-prover 
interactive proof system (CIPS) model of [7]. The differences between this model and ours are that 
the verifier in a CIPS engages in a two-way conversation with PI and PO, who are not allowed 
to see each other's messages. Furthermore, one of the CIPS provers (the one who is telling the 
truth) is allowed to use random coins. A CIPS is allowed to fail to halt with high probability 
for nonmembers of the language under consideration. The following facts have been proven in [7] 
regarding the CIPS model with constant-space verifiers: 

Fact 8. Every recursively enumerable language has a CIPS. This remains true even if the verifier 
is deterministic. 

Fact 9. Every recursive language has a CIPS with halting probability 1. 

3 Results 

We start by showing that constant-space probabilistic verifiers for zero-information debates are 
more powerful than their deterministic counterparts. Note the contrast between the following 
theorem and Fact El 

Theorem 1. For any k > 1, and any space constructible bound s(n) such that s(n) = 0(n k ), 

NSPACE(s(n)) C ZDEB(1, 2 S W). 

Proof. Let L be a language recognized by an s(n)-space nondeterministic TM M with a single work 
tape and separate read-only input tape. As in [6] (Theorem 3.12, p. 817), we assume without loss 
of generality that M keeps a counter in a separate track of its work tape, and that this counter 

3 This follows from a simplification of the proof of Theorem 3.12 in [6]. 
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Figure 1: PO claims a transition error between configurations a and /3. 

is incremented after each action performed on the first track, even for configurations that are not 
reachable from the initial configuration. M halts when this counter reaches 2 cs ( n \ where c is a 
constant. Let Qm denote the state set of M. 

We will describe a debate system with verifier V for L. Prover PI attempts to convince V that 
the input string w is in L by repeatedly presenting what it claims to be an accepting computation 
path (ACP) of M on w. An ACP is a sequence of configurations of M on w that starts with the 
initial configuration, ends with an accepting configuration, and has the property that every pair 
of adjacent configurations in it obeys M's nondeterministic transition relation. Each configuration 
in the ACP is preceded by the symbol $, which we assume is not a member of M's work tape 
alphabet or state set. Configurations are strings of the form uqdX, representing the work tape 
and current state of M, where u and x are strings over the work tape alphabet of M, and q^ 
is a so-called state/ direction symbol whose position is used for representing the work tape head 
position. The value of q^ in the ith. configuration in an ACP indicates both the state of M in that 
configuration, and the direction in traveled by the input head of M during the transition from the 
(i-l)th configuration, for all i > 1. The initial configuration consists of the single state/direction 
symbol corresponding to the start state of M, and head direction 0. The input head position is not 
represented, since V will use its own input head to track this head. PI is supposed to write the 
separator symbol # between every two adjacent ACP in its messages. 

PO's task is to show that something is wrong with the computation paths sent by PI. Since 

V can check that a purported ACP "begins right" (i.e. with the initial configuration), and "ends 
right" (i.e. contains the accept state symbol in its last configuration) on its own, P0 attempts to 
convince V that PI is making a transition error between two configurations, or that PI is trying 
to make V run forever by reading an endless "configuration." In the following, these two types 
counterargument are called the transition error and infinity (or oo) claims, respectively. Of course, 

V should also be wary of the possibility that P0 may be trying to trick it to falsely reject a valid 
transition, or to cause it to enter a loop. 

PI and P0 talk symbol by symbol, and V goes through the sequences of symbols that they emit 
in a parallel fashion. PO's alphabet (A in the definition in the previous section) is {0, q, r, v, oo}. P0 
writes to match each symbol written by PI until it comes to a point where it wishes to indicate 
an error in Pi's sequence, as follows. 

If P0 wishes to claim that PI is making a transition error between two adjacent configurations, 
say, a and /3, it writes ? in the position corresponding to the $ preceding a, and then indicates the 
positions within these configurations whose examination would lead to the discovery of the error 
by the symbols r and v, emitting 0's for the other positions. 

For example, if P0 is claiming that the invalidity of the transition from a to /3 can be detected 
by comparing the j th , (j+l) st and (j+2) nd symbols of a with the k th , (k+l) st and (k+2) nd symbols 
of (3, the sequences produced by PI and P0 will look as in Figure [fl where an and stand for 
the i th characters of configurations a and /3, respectively. Of course, if P0 is honest, j = k, and 
dishonest PO's may well trick careless verifers to reject the input by giving these signals for carefully 
selected unequal j and k values. 

At this point, some readers may be worrying about how P0 "knows" that PI will make a tran- 
sition error at that particular pair of configurations even before PI has written the first character 



5 



of the first configuration in the pair. This is not a problem, since our definition of debate systems 
just requires such a PO function to exist for any particular PI that makes an erroneous claim, and 
no PO function should exist for an honest PI giving a correct ACP. For any sequence of symbols 
that can be produced by a deterministic PI containing a transition error, there is of course such a 
response sequence associated to a deterministic PO. 

If PO wishes to claim that PI is trying to make V run forever by giving an infinite-length 
"configuration" rj, it does not use the method above to indicate the transition error between the 
preceding configuration and r\. Instead, PO writes the symbol oo in response to the $ preceding the 
infinite-length configuration. 

We now describe the verifier V. Let us call each segment of the debate delimited by PI printing 
#'sa round. V accepts immediately if PO does not report an error of PI (by either one of the two 
methods described above) in any single roundQ or if it notices similar easily detectable "syntax 
errors" by PO. V rejects immediately if it sees PI starting any round with an incorrect initial 
configuration, or if it detects PI committing simple syntax errors such as printing a configuration 
without exactly one state/direction symbol. 

V performs a partial check of every transition between adjacent configuration pairs presented by 
PI by just focusing on the three-symbol "window" that has a state/direction symbol in its middle 
in each configuration. If these two windows are consistent with the transition function of M and 
the presently scanned input symbol, V moves its input head (which is tracing the movement of the 
input head of M) in the specified direction on the tape, and continues execution. Otherwise, it 
rejects. 

If PO is reporting a transition error, V tries to make sure that PO is indeed pointing out to 
corresponding positions in the two successive configurations. V compares these values by using 
a modified version of a technique by Freivalds [9] . Figure [1] may be helpful during the following 
exposition, which refers to a number I whose value will be fixed according to the desired error 
bound, as will be explained later. 

When it sees that PO has responded by ? to the configuration delimiter $ from PI, V starts 
flipping 4/ coins on each of the first j symbols of configuration a. V flips I additional coins on the 
jth symbol corresponding to r. These 41 j + 1 coins will be called the first set of accept coins. When 
scanning the relevant portion of the messages of PI, V stores the symbols ay, ay+i, and ay+2 m 
its memory for use in a possible comparison. For the next configuration /3, V similarly flips Alk + 1 
coins that we name the second set of accept coins. Parallelly to the tossing of the accept coins, V 
flips another set of 2l(j + k) coins, which will be called the control coins. 

After reading the v, V decides whether to accept, control or continue: 

• If one or both of the sets of accept coins contains all O's, V accepts. 

• If both sets of accept coins contain at least one 1, and the set of control coins contains all 
O's, V proceeds to check if the two triples (ay, oy+i, ay+2) and (/3&, and provide 
evidence for an invalid transition of M. If the two triples are among those that can appear 
when two configurations in a legitimate run of M are properly aligned, V accepts. Otherwise, 
it rejects. 

• If the set of control coins, as well as both sets of accept coins, all contain at least one 1, V 
continues execution without comparing the triples, discarding all information it collected for 
this purpose. 

4 Note that the last configuration presented in such a round must be accepting, since we assume that PI must be 
honest if PO is violating the protocol. 
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If V arrives at the end of a round, it rejects if the final configuration is not accepting. Otherwise, 
it continues to the next round. 

The only case where V gives up simulating the input head of M is when PO writes oo in response 
to some $ of PI, claiming that PI will be emitting an infinite sequence of non-$ symbols from this 
point on. 

• If s(n) = 0(n), V inspects this claim by checking if the next mn symbols emitted by PI 
contains a $ for some constant m such that mn > s(n) for all input lengths n > 0. (The 
empty input can be handled separately.) This check can be performed by using V's input 
tape as a ruler. V accepts if it sees a $ in this scan. Otherwise, it rejects. 

• If s{n) is superlinear, V enters a loop where each iteration involves reading n symbols from 
PI, and flipping rn coins. V accepts if it sees any $ during this process. V rejects if all of 
the rn outcomes for some iteration turn out to be 0. 

This concludes the description of V . We now show that this constitutes a bounded-error debate 
system for L. Let us establish first that V halts with probability 1. When w € L, in which 
case PI will be repeating a valid ACP in an infinite loop, this is evident from the facts that V 
terminates directly if PO does not claim any error, the procedure associated with the PO signal 
oo halts with probability 1, and each processing of the transition error claim involves a small but 
nonzero probability of halting. When w £ L, PI could hope to avoid the oo signal by not giving an 
infinitely long "configuration", but by making a single transition error to an infinite loop of M's 
computation, thereby keeping the halting probability low. But this is not possible because of the 
way we defined M in the beginning: Since we equipped M with a robust counter that causes M 
to halt when it maxes out, any infinite sequence of configurations purporting to describe a run of 
M must contain not one, but infinitely many transition errors, which will of course be reported by 
PO, and whose combined processing will lead the halting probability to accumulate to 1. 

We will now analyze the probabilistic procedures for the transition error and oo claims, and 
show that the probability that they lead to an incorrect decision is much lower than the probability 
of a correct decision. Consider Figure Q] again. Let A denote the event of acceptance as the result 
of the processing of a single transition error claim. Let T denote the event that the two triples from 
the two successive configurations are indeed tested for consistency during this procedure. According 
to the algorithm described above, 

Pr[A] = 2~ Al i~ l + (1 - 2 - 4l i- l )2- Alk -\ (1) 

and 

Pr[T] = (1 - Pr[A])2- 2l ( j+k \ (2) 
If w 6 L, PO will make sure that j ^ k during transition error claims. In this case, 

Pr[A\j + k\> 2-'W +1 ) + 2 -'( 4fc + 1 )- 1 > 2- , W?+ 1 )- 1 + 2- , C 4fc+1 )- 1 . 

Since j ^ k, the value of one of j and k is at most . Without loss of generality, we assume j 

to have the smaller value, and we get 2- , M?+i)-l > 2~ / ( 42± ^ li+1 H = 2- z (2i+2A;-l)-i_ Then, 

Pr[A\j ^k}> 2- I (2i+2fc-i)-i. 

The probability that V will be tricked to test the incorrectly aligned triples indicated by PO, 
thereby erroneously rejecting the input, is 

Pr[T\j ^k]< 2- l( - 2j+2k \ 
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Therefore, 

Pr[A\j ^k]> 2^ 1 Pr[T|j ^ k], 

that is, each incorrect claim about a transition error leads to an acceptance with probability at 
least 2 l ~ l times greater than the probability that it leads to a rejection. 

If w £ L, PI should make transition errors to end its rounds with accepting configurations, and 
PO raises the transition error claim with j = k. In this case, it is easy to see that V accepts with 
probability 

Pr[A\ j = k}< 2- 4lj - l+1 , 
and tests the transition among the two triples with probability 

Pr[T | j = k]> 2~ ilj -\ 

leading us to conclude 

Pr[T\j = k]> 2 l ~ 2 Pr{A\ j = k]. 

Therefore, each correct claim about a transition error leads to rejection with probability at least 
2 l ~ 2 times greater than the probability of an incorrect acceptance. 

As for the infinity claim, the only way V can reach an incorrect decision in this regard is the 
possibility of rejecting a proper ACP when s(n) is superlinear. The control loop in the oo-checking 
procedure described above can complete at most L^rJ iterations!! and if V is unlucky enough to 
obtain "all O's" for a set of rn coin flips in any one of these iterations, it will reject incorrectly. The 
probability of this is 

I I 

£ (1- 2 ~ rn ) i - 1 2~ rn < s(n)2- rn , 
i=i 

which is exponentially small, since s(n) is polynomially bounded. 

It is clear that any error bound e < ^ can be achieved by tuning the constants / and r in these 
procedures. 

Finally, we analyze the time complexity. Since j and k are at most s(n) in Equations [T] and 
the probability of halting in any single processing of a transition error claim is 2~°^ n ^ . There can 
be at most 2°( s ( n ^ configuration descriptions of length 0(s(n)) between any two adjacent transition 
error claims. The oo check takes linear time for s(n) = 0(n), and 2°( rn ) time for superlinear s(n). 
We conclude that V halts in expected time 2°^ n ^ in all cases. □ 

Note that the proof of Theorem Q] depends crucially on the inability of PI to see PO's messages. 
If PI could see PO, it could detect when PO claimed a transition error is about to start, and present 
a correct transition at that point, branding PO a liar. It is also interesting to note that, since PI is 
deterministic, PO is in fact not required to see the output of PI either. 

In the next theorem, we examine the power of asymmetric debates by allowing PO to display 
part (but not all) of its messages to PI. 

Theorem 2. For any k > 1, and any space constructible bound s(n) such that s(n) = 0(n k ), 

TIME(2 s ( n )) C PDEB(l,2 s ( n )). 

5 Since PI is truthful in this case, a $ will be encountered after at most s(n) PI symbols are scanned. 
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Proof. We modify the construction of Theorem [T] by setting up a debate about the computation 
of an alternating, rather than nondeterministic, Turing machine M with space bound s(n) on 
the input w. The result then follows using the fact [I] that TIME(2 S (")) = ASPACE(s(n)) for any 
s(n) = Q(log n). 

We assume without loss of generality that the start state of M is existential, no two existential 
or universal moves follow each other, and there are exactly two outgoing transitions from all non- 
halting states. 

As in [6], PI will try to convince the verifier of the membership of w in the language L of M 
by showing that it can always pick a sequence of existential transitions of M that end up in an 
accept state, even if the universal transitions are selected by an adversary. The protocol begins 
with PI writing a sequence of symbols representing the first two configurations in an ACP of M, 
thereby making the existential choice in the first transition. PO then announces its choice about 
the next (universal) move of M to PI by using one of two prespecified symbols from the public 
communication alphabet T. PI replies with the third and fourth configurations in the ACP, and 
the conversation goes on in this manner. All through this public exchange between PO and PI 
about the path for M to follow, PO is privately emitting its claims about the errors that PO is 
committing, using a suitably adapted version^) of the method in the proof of Theorem [TJ 

The runtime and error bound analyses of the previous proof need no modification in this proof. 

□ 

Contrasting Theorem [2] with Fact we see that probabilistic verifiers outperform their deter- 
ministic counterparts on partial-information debates as well. 

Our techniques above can be seen easily to have an implication regarding a variant of the CIPS 
model. The proof of Fact [9] in [7] makes crucial use of the feature of that model which forbids the 
provers from seeing each other's messages. We can show that a new model obtained by allowing 
the PO of the CIPS model to see all of Pi's messages would still have the capability of handling all 
recursive languages, even if we downgrade the truthful prover to be deterministic. 

Theorem 3. Every recursive language has a competing-prover interactive proof system where the 
provers are deterministic, the verifier is a probabilistic finite automaton that halts with probability 
1, PO displays zero information to PI, and PI displays complete information to PO. 

Proof. Let M be a deterministic Turing machine that halts for all inputs. We will use the protocol 
in the proof of Theorem [TJ PI will present ACP's of M on the input string w, PO will point out 
transition errors in the messages of PI, and the verifier V will essentially process the transition 
error claims all in the same manner as in that proof. The difference is that PO will not be making 
infinity claims, since the methods for processing those in Theorem [1] are only applicable if M has 
a polynomial space bound. Instead, we use the following technique from [7]. 

After each move, V tosses a coin, and uses its new right to talk to the provers to announce the 
outcome to both provers. If the outcome is 1, V, PO and PI continue with the protocol as usual. 
Otherwise, they restart the protocol, with PI emitting the first symbol of a string that it claims to 
be an ACP. Suppose that a correct description of the (accepting or rejecting) computation path of 
M for w in the proper format for PI is t symbols long. Either PI or PO must then tell a lie within 
the first t symbols of their messages. There will be infinitely many contiguous subsequences of t 
l's appearing one after the other within the sequence of the announced coin outcomes. In each of 
these runs of l's, V will halt with a small probability, but the decision that it gives with that small 
probability will be overwhelmingly likely to be correct, as we saw in the analysis of the processing 

6 Note that V sometimes needs to check for consistency between triples that correspond to configurations that are 
not one, but two M-moves away from each other in this new protocol. 
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of the transition error claims in the proof of Theorem [TJ Overall, V halts with probability 1, and 
its error bound can be tuned down to be any desired nonzero value. □ 



4 Concluding Remarks 

We initiated the study of probabilistic checking of asymmetric debates, where the messages of one 
of the competing provers may be partially or completely hidden from the other prover. We proved 
that constant-space probabilistic verifiers outperform deterministic ones on both zero-information 
and partial- information debates. Some links with the related model of competing-prover interactive 
proof systems were also examined. 

The following is an incomplete list of open questions related to this work: 

• We do not know if Theorems [1] and [2] can be extended for space bounds that are not polyno- 
mially bounded. 

• Although we have established some lower bounds, full characterizations of the power (with 
and without the simultaneous time restrictions) of complete-, zero-, and partial-information 
debate systems are still open for investigation. 

• Our protocols depend on the fact that the provers are deterministic, i.e. that they are 
functions from the input and the previous communication to the next symbol to be emitted. 
When we allow PI to use a coin to determine whether to make an error in the configuration 
to be printed next, we no longer have a guarantee that there exists a corresponding PO that 
will lead V to rejection with high probability. This is reminiscent of the fact that the CIPS 
models of [TT] seem to be weakened if the provers are allowed to have access to secret sources 
of unbiased random bits, although note that even a public coin seems enough in our case. 
Determining the power of debates with probabilistic verifiers is an open question. 
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